$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: jOGgkwrFzNxoaV6fPt0b+3zXzxxW3mF0afp+vtsomus= Subject key identifier: 06:F6:E5:04:01:B2:A7:D5:F9:C3:3A:92:59:4B:EF:FF:56:7E:14:8A Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: E0 Signing time: Sat 14 Nov 2026 22:56:15 +0000 Manifest this update: Sat 14 Nov 2026 22:56:14 +0000 Manifest next update: Sat 21 Nov 2026 22:56:14 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: nydsri6lEFd4kawVpCeCfJpzWM9e3pmPmfbh5ujhkl4=) 2: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: U51mlMalJmZBrqYY1BoCbXpfjv9sa1XXUb3od6K2Xgo=) 3: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: 8H+PbglaIHFfEwlgna+8LyIUK2HVCOEF9s+aP+GbhZ0=) 4: 5551B690BC2611F18E1A37534111F970.roa (hash: F16PCG2VEAdxTB+L2eKUM8FQEg6FJU6Wfcx7TwfgZ/s=) 5: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: tF+L5ozw6GVJsQCQ97D7LBOsSW8qcFqBg2pzc4w+7b0=) 6: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: EzOCvowpuyBtBPkDe14ju9M+ZSSTfJpiMzZhgJAu2XM=) 7: 55DE48EEBC2611F18E1A37534111F970.roa (hash: 7htcGMTGHQp9f5ewK8IlgCc1VFqix/6d4IWdsJHL41c=) 8: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: XydHxRvO+DZnu1noJEcNd2CkT2aR/0Xo6Zf7EHDRHc4=) 9: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: E/Jje5jJPx3HsBr4rPdTqAGYzM44kZ/ZOpAN349E8LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Nov 14 22:56:14 2026 GMT Not After : Nov 21 22:56:14 2026 GMT Subject: CN=6af8e70f-4b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:59:51:ee:11:8d:2c:94:c7:22:c9:6f:cd: 8f:ca:73:e1:5a:95:81:45:6d:3c:bc:9c:9a:28:a1: fa:da:74:3f:da:10:af:70:e9:29:f4:48:f8:d2:c4: 0f:40:29:42:8b:07:7a:ce:de:a8:42:46:5e:2e:1f: c9:16:ba:37:a5:30:ef:9d:21:e8:12:2f:9d:65:75: 0d:1d:a7:34:ac:90:b7:cd:c2:37:c4:6b:3f:19:91: ec:06:71:b2:0a:91:5e:76:e2:50:d6:7d:d6:eb:27: 07:21:10:34:d7:58:fc:73:fe:98:6d:99:6f:43:54: 23:26:5f:b9:ad:bb:26:b3:40:ad:c0:ec:b0:37:6a: 76:4f:b3:20:79:67:be:69:04:46:29:a2:ab:d3:60: 83:5b:79:b5:39:ad:fb:93:b4:d8:0b:35:4e:73:64: 0c:11:83:2b:86:ed:bc:d9:0e:96:d8:d6:85:bc:1e: 23:02:0d:da:12:d3:d5:21:5e:fb:9d:5a:a4:4c:b8: 2e:6a:e1:2e:59:0c:47:51:cb:c9:85:64:f4:ec:54: 42:44:2b:d6:27:ac:4c:57:62:92:b8:26:c4:7e:44: 8c:85:18:ba:a1:77:33:96:55:61:80:27:77:8a:06: ca:37:b0:b7:8f:e8:be:c5:1e:74:d7:2a:24:e3:23: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:E5:04:01:B2:A7:D5:F9:C3:3A:92:59:4B:EF:FF:56:7E:14:8A X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d5:32:6c:b9:3d:a9:69:7b:48:60:a5:dc:b3:1e:fa:81:3e: 86:03:35:c0:f7:21:24:1f:10:39:a9:44:92:84:92:fb:c9:49: ad:97:97:ee:46:54:18:f4:2a:bb:da:23:34:d4:80:38:20:01: 7f:1c:2b:a6:19:d2:99:aa:65:aa:70:9b:8a:05:39:8a:f2:0b: dd:02:bd:ab:79:5b:83:35:eb:7f:71:09:f6:d5:72:3e:89:31: c1:01:58:1a:3c:be:d9:5c:90:c8:65:41:13:e0:e4:25:7f:47: 6c:c8:46:7d:fb:6c:a8:cf:d0:e7:72:03:7a:3f:66:d6:57:15: 41:85:06:be:df:18:53:7e:30:ae:8c:68:41:25:ca:d4:ef:94: d0:93:c7:82:0a:55:5d:aa:2d:7b:3d:3b:38:0b:f6:19:cc:64: ab:9f:44:d1:9b:92:6a:30:63:f7:00:d9:cd:c7:25:a5:1a:82: 8e:86:aa:fb:d2:6b:f5:43:bb:af:41:15:25:d4:74:a6:f2:63: 16:be:68:0f:14:5e:09:bb:a3:aa:24:de:83:d4:24:cc:c1:5c: bb:65:fa:19:9a:56:88:dd:47:a4:19:fa:de:78:6b:05:35:31: 5f:aa:2e:e4:7c:99:67:81:f2:31:99:11:8b:2c:a3:10:c8:59: 8a:92:88:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMTE0MjI1NjE0WhcNMjYxMTIxMjI1NjE0WjAYMRYwFAYD VQQDEw02YWY4ZTcwZi00YjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD5ZUe4RjSyUxyLJb82PynPhWpWBRW08vJyaKKH62nQ/2hCvcOkp9Ej40sQP QClCiwd6zt6oQkZeLh/JFro3pTDvnSHoEi+dZXUNHac0rJC3zcI3xGs/GZHsBnGy CpFeduJQ1n3W6ycHIRA011j8c/6YbZlvQ1QjJl+5rbsms0CtwOywN2p2T7MgeWe+ aQRGKaKr02CDW3m1Oa37k7TYCzVOc2QMEYMrhu282Q6W2NaFvB4jAg3aEtPVIV77 nVqkTLguauEuWQxHUcvJhWT07FRCRCvWJ6xMV2KSuCbEfkSMhRi6oXczllVhgCd3 igbKN7C3j+i+xR501yok4yNcsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb25QQB sqfV+cM6kllL7/9WfhSKMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGdUybLk9qWl7SGCl3LMe+oE+hgM1wPchJB8QOalEkoSS+8lJrZeX7kZUGPQq u9ojNNSAOCABfxwrphnSmaplqnCbigU5ivIL3QK9q3lbgzXrf3EJ9tVyPokxwQFY Gjy+2VyQyGVBE+DkJX9HbMhGfftsqM/Q53IDej9m1lcVQYUGvt8YU34wroxoQSXK 1O+U0JPHggpVXaotez07OAv2Gcxkq59E0ZuSajBj9wDZzcclpRqCjoaq+9Jr9UO7 r0EVJdR0pvJjFr5oDxReCbujqiTeg9QkzMFcu2X6GZpWiN1HpBn63nhrBTUxX6ou 5HyZZ4HyMZkRiyyjEMhZipKIRw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:12:24 2026 by rpki-client